Embed Size (px)
Citation preview
www.westermo.com
Application Notes
IPsec VPN Configuration Application Notes
DR-250DSL2/2+ Router
[email protected]: +46 (0)16 42 80 00Fax: +46 (0)16 42 80 01
United Kingdom Web: www.westermo.co.ukTechnical e-mail: [email protected]: +44 (0)1489 580585Fax: +44 (0)1489 580586
[email protected]: +49(0)7254 95400-0Fax: +49(0)7254-95400-9
[email protected]él : +33 1 69 10 21 00Fax : +33 1 69 10 21 01 Singaporewww.westermo.comE-mail: [email protected] +65 6743 9801 Fax +65 6745 0670
Technical Support
If you require assistance with any of the instructions in this application note you can contact Westermo as follows:
The GreenBow Ipsec VPN Client to DR-250
VPN Client 4.1, design for Windows Vista
www.westermo.comGreenBow Ipsec VPN Client Application Notes
Application Notes
TheGreenBow VPN client to Westermo DR-250 ADSL routerIntroduction
This application note covers the setup of TheGreenBow™ VPN IPsec client to a Westermo DR-250 router. TheGreenBow™ client is a commercial licensed software. A free trial version is available at www.thegreenbow.com. This client has been chosen to complement the DR series of routers and provide an easy to use client. The various versions of Microsoft Windows do support IPsec clients to a lesser or greater extent. The Microsoft clients are often problematic, time consuming to configure and require changes to the registry to make them work reliably. Westermo recommend that the TheGreenBow client is used in all application where access is required from a computer to a remote LAN. For LAN to LAN applications refer to the Westermo VPN application note.
This application note was tested with version 4.10.009 of the TheGreenBow client.
www.westermo.comGreenBow Ipsec VPN Client Application Notes
Application Notes
The GreenBow Setup
www.westermo.comGreenBow Ipsec VPN Client Application Notes
Application Notes
www.westermo.comGreenBow Ipsec VPN Client Application Notes
Application Notes
DR-250 Setup – Eroute-x and IKE Screen shots
www.westermo.comGreenBow Ipsec VPN Client Application Notes
Application Notes
Extract from config.da0
Eroute configuration. The Eroute number can be any valid eroute on the router. The router must have IPsec encryption enabled on the router. The DR-250 has IPsec enabled as default but the MR-200 and MR-250 requires an upgrade option.
Eroute Configuationeroute 0 descr "GreenBow VPN client"
eroute 0 peerid "Eagle"
eroute 0 ourid "Hawk"
eroute 0 locip "192.168.1.0"
eroute 0 locmsk "255.255.255.0"
eroute 0 remip "192.168.2.100" The IP address must match the client address on GreenBow
eroute 0 remmsk "255.255.255.255"
eroute 0 ESPauth "MD5"
eroute 0 ESPenc "DES"
eroute 0 ltime 28800
eroute 0 lkbytes 0
IKE configurationAggressive mode must be switched ON.
ike 0 encalg "3DES"
ike 0 ltime 28800
ike 0 aggressive ON
ike 0 deblevel 4
ike 1 encalg "3DES"
ike 1 ltime 28800
ike 1 aggressive ON
